Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
File:                     J_8gRAummKTcBDm8F5-zOj7hzJU.mft (raw, json)
Hash identifier:          E53WW3zNpSllKcXEXoMRfFD0VYt3/VuGVTqTpaIr2D8=
Subject key identifier:   A9:BC:C0:BD:A5:69:30:3C:94:14:58:17:66:39:90:27:69:9D:E7:1A
Authority key identifier: 27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
Certificate issuer:       /CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Certificate serial:       019211065DE236BD7269FA244C8A248EC1D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
Manifest number:          099E
Signing time:             Fri 20 Sep 2024 20:01:22 +0000
Manifest this update:     Fri 20 Sep 2024 20:01:22 +0000
Manifest next update:     Sat 21 Sep 2024 20:01:22 +0000
Files and hashes:         1: 8W_CpPeF-exZI59KB_PFepNWbbM.roa (hash: jRS2kAc/ARw6ucwOZwAnUJM3WOdLdEgarxoKR+Xy+2Y=)
                          2: J_8gRAummKTcBDm8F5-zOj7hzJU.crl (hash: qW3sEk9lKJ7YpfSYdBZfkN6p5HsH9J7+L//EijciFH0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:11:06:5d:e2:36:bd:72:69:fa:24:4c:8a:24:8e:c1:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
        Validity
            Not Before: Sep 20 20:01:22 2024 GMT
            Not After : Sep 21 20:01:22 2024 GMT
        Subject: CN=a9bcc0bda569303c9414581766399027699de71a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:22:ec:48:a2:9d:f4:13:92:6a:f5:af:dd:b1:
                    fa:14:67:0f:04:37:f7:0d:af:33:67:ae:93:c1:9f:
                    b3:79:2f:9b:bd:60:4e:d6:5a:44:f5:08:51:cf:51:
                    cf:8c:a9:ce:bd:84:d1:90:23:cd:05:17:23:27:32:
                    bf:d5:e8:58:82:e4:f2:25:5d:1f:a4:e9:4c:45:ab:
                    f1:36:6f:24:3f:69:84:aa:ab:4d:d6:16:a8:7f:f6:
                    38:92:e8:b9:19:34:b2:3f:f6:46:52:58:57:c4:87:
                    c0:e6:f1:e2:87:8c:dd:70:cb:bb:e5:e3:46:f6:a3:
                    bf:29:99:6d:3f:50:f8:b4:92:75:1e:33:16:0c:ff:
                    e1:b5:c8:76:8b:2e:3f:46:33:61:b2:2a:b2:03:b7:
                    1e:49:a0:6d:97:a0:9c:15:e8:c3:01:f3:06:71:b2:
                    3a:c6:40:01:f2:14:a5:46:16:6b:d0:dc:c3:c3:53:
                    20:61:17:dc:fc:ce:32:f4:a3:7a:cb:a6:a9:a7:b7:
                    67:70:30:9a:26:01:81:9b:2e:d2:8a:7e:ff:e9:0d:
                    60:6a:b0:cf:93:d3:80:6c:68:9e:88:8d:0e:db:a7:
                    bb:60:1b:60:0f:a5:a4:48:74:6d:65:39:f0:1d:36:
                    da:74:93:47:4f:48:27:8b:b2:37:d1:87:8b:bd:bd:
                    1e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BC:C0:BD:A5:69:30:3C:94:14:58:17:66:39:90:27:69:9D:E7:1A
            X509v3 Authority Key Identifier:
                keyid:27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:f2:70:91:d7:12:7f:fd:35:2c:7a:e7:fe:c6:f3:ee:ba:78:
         60:62:95:8d:1a:b4:e6:d9:75:69:25:a1:c3:d0:c4:0b:92:22:
         4f:61:43:bc:15:83:5a:ff:5f:7c:eb:f7:ee:1d:a6:57:07:c3:
         90:57:8f:fb:9c:b4:1c:fe:a7:c5:cf:a5:9e:e2:0c:a3:01:21:
         6c:fb:84:62:6d:5a:77:31:a3:ee:8e:3f:74:8a:0e:2e:66:28:
         62:b3:7a:3a:e2:37:85:c4:19:75:62:ed:85:64:23:ca:f7:5e:
         9f:6c:cf:57:fa:99:1b:f9:aa:91:0a:6e:b1:fd:3a:6e:51:93:
         31:16:ce:41:15:09:21:3a:81:4e:24:6f:52:91:e8:fc:f4:bd:
         71:46:f3:a0:fb:18:f7:07:71:13:f0:58:63:54:71:a8:d9:0b:
         23:af:77:d2:a2:cd:b7:12:cb:d1:a0:41:b5:af:57:71:65:3b:
         6c:76:e1:8f:ce:f6:05:94:45:57:d5:92:a0:ce:f9:50:84:8e:
         97:9f:be:f3:69:f4:f0:23:82:7d:2f:25:2a:5a:2d:33:8d:d5:
         91:ef:cd:a0:4e:64:77:91:17:c5:3b:81:6b:80:46:80:2f:1e:
         20:bf:15:1d:3e:b5:90:f2:b3:24:b9:93:94:5d:4f:00:70:45:
         5f:37:5b:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZIRBl3iNr1yafokTIokjsHRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZmYyMDQ0MGJhNjk4YTRkYzA0MzliYzE3OWZiMzNhM2Vl
MWNjOTUwHhcNMjQwOTIwMjAwMTIyWhcNMjQwOTIxMjAwMTIyWjAzMTEwLwYDVQQD
EyhhOWJjYzBiZGE1NjkzMDNjOTQxNDU4MTc2NjM5OTAyNzY5OWRlNzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSLsSKKd9BOSavWv3bH6FGcPBDf3
Da8zZ66TwZ+zeS+bvWBO1lpE9QhRz1HPjKnOvYTRkCPNBRcjJzK/1ehYguTyJV0f
pOlMRavxNm8kP2mEqqtN1haof/Y4kui5GTSyP/ZGUlhXxIfA5vHih4zdcMu75eNG
9qO/KZltP1D4tJJ1HjMWDP/htch2iy4/RjNhsiqyA7ceSaBtl6CcFejDAfMGcbI6
xkAB8hSlRhZr0NzDw1MgYRfc/M4y9KN6y6app7dncDCaJgGBmy7Sin7/6Q1garDP
k9OAbGieiI0O26e7YBtgD6WkSHRtZTnwHTbadJNHT0gni7I30YeLvb0e4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKm8wL2laTA8lBRYF2Y5kCdpnecaMB8GA1UdIwQY
MBaAFCf/IEQLppik3AQ5vBefszo+4cyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl84Z1JBdW1tS1RjQkRtOEY1LXpPajdoekpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yMWRlYmEtZGI2Ni00NzAyLWJkYmYt
MDkxMTVkNTkyZTZmLzEvSl84Z1JBdW1tS1RjQkRtOEY1LXpPajdoekpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yMWRlYmEtZGI2Ni00NzAyLWJkYmYtMDkxMTVkNTkyZTZm
LzEvSl84Z1JBdW1tS1RjQkRtOEY1LXpPajdoekpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfJwkdcS
f/01LHrn/sbz7rp4YGKVjRq05tl1aSWhw9DEC5IiT2FDvBWDWv9ffOv37h2mVwfD
kFeP+5y0HP6nxc+lnuIMowEhbPuEYm1adzGj7o4/dIoOLmYoYrN6OuI3hcQZdWLt
hWQjyvden2zPV/qZG/mqkQpusf06blGTMRbOQRUJITqBTiRvUpHo/PS9cUbzoPsY
9wdxE/BYY1RxqNkLI6930qLNtxLL0aBBta9XcWU7bHbhj872BZRFV9WSoM75UISO
l5++82n08COCfS8lKlotM43Vke/NoE5kd5EXxTuBa4BGgC8eIL8VHT61kPKzJLmT
lF1PAHBFXzdb/Q==
-----END CERTIFICATE-----
Generated at Sat Sep 21 00:42:08 2024 by rpki-client on console-ams.rpki-client.org